Windows Update svchost high CPU and RAM usage

[radugb]

Howdy all! As the title suggests, I am having issues with windows update.

It started only two weeks ago, when I started up and my CPU monitor said something was running high. After trial and error, I found if I stopped the Windows Updater service, the system went back to normal.

Right now it's taking 13%-20% CPU and 2GB of memory when the updater is active.

I've tried all the suggested fixes from the other threads: reinstalled KB3102810, ran sfc scannow (log attached...but in RAR version, ZIP version was 110MB). I've tried running updates and restoring hidden updates. I can access Windows Update, and it displays one recommended and 2 optional updates to install, but when I try to install those updates, Windows Update just hangs at the downloading updates status (0% downloaded after 24 hours). I ran the SURT, it crashed my system after an hour...ran out of memory...:sarc:

Suggestions?

 

[wben353]

Hi radugb & welcome to sevenforums. I'll try to help you.
Have your read & tried Windows Update - Reset?
Have you read this article, from 5 days ago? click here
Try running SFCFix.exe by Niemiro & if it completes, post the log that appears on your desktop.

 

[wben353]

After several minutes, your CBS.log finally opened. You have numerous entries:

2016-02-14 02:37:38, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-02-14 02:37:38, Info CBS Session: 30500627_3109842473 initialized by client WindowsUpdateAgent.

And unrepaired/corrupt files:

2016-02-19 23:03:49, Info CSI 00000541 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"fontext.dll"; source file in store is also corrupted

failing hard drive? have you run disk check from administrator command prompt? CHKDSK /r

Hopefully, we'll eventually be able to get SURT to complete & produce log.

 

[radugb]

Hi radugb & welcome to sevenforums. I'll try to help you.
Have your read & tried Windows Update - Reset?
Have you read this article, from 5 days ago? click here
Try running SFCFix.exe by Niemiro & if it completes, post the log that appears on your desktop.

Thank you for your reply.

I will apply the Windows Update - Reset tonight. I read the article about KB3114717. It does not apply to me since I am running Office 365 with Excel and Word 2016. If the Windows Update - Reset does not work, I will try running the SFCFix.exe.

 

[radugb]

After several minutes, your CBS.log finally opened. You have numerous entries:

2016-02-14 02:37:38, Info CBS Failed to internally open package. [HRESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE]
2016-02-14 02:37:38, Info CBS Session: 30500627_3109842473 initialized by client WindowsUpdateAgent.

And unrepaired/corrupt files:

2016-02-19 23:03:49, Info CSI 00000541 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:22{11}]"fontext.dll"; source file in store is also corrupted

failing hard drive? have you run disk check from administrator command prompt? CHKDSK /r

Hopefully, we'll eventually be able to get SURT to complete & produce log.

You can ignore the corrupted fontext.dll message. I modded both it and my shell32.dll files many years back with custom folder icons. I know it shows up as corrupt, but they really are not. Not sure about the "Failed to internally open package". Will the Windows Update-Reset delete all the update packages or do I need to do that manually?

 

[radugb]

I ran the Windows Update - Reset full patch. No dice, when I go into Windows Update again, TrustedInstaller and svchost both jump to 16% CPU usage and increase in memory until the system memory is full.

 

[torchwood]

Do you have KB3022345, if so please uninstall it, it will be replaced by a newer patched version.
As the other error is related to the windows update engine, please follow the instructions from this link,
http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

Roy

 

[martinlest]

I came looking for threads about the same issue. Found this one immediately!

These pages might be helpful:

How to fix: Svchost.exe (netsvcs) memory leak or high CPU usage problems - wintips.org - Windows Tips & How-tos

And this, mentioned in the above, for which I had high hopes:

https://www.microsoft.com/en-us/download/details.aspx?id=47351

When I downloaded and tried to run that fix, Windows told me it was already installed. Well, my CPU is still highjacked by Windows Update, so I have disabled the Windows Update service. That stopped the CPU usage immediately, as with the O/P.

EDIT: Roy posted at the same time as me,as above, so will follow his link and see if this helps....

 

[martinlest]

The batch file seems to have fixed the issue! I've only rebooted a couple of times, but looks good - after startup 'settles down', CPU usage now shows 0% instead of 15% and growing...

Thank you. Will post back if this is a flash in the pan!

 

[martinlest]

OK, third time (reboot) unlucky. My CPU now runs 100% after startup until I manage (system pretty unresponsive) to get into Services and stop the Windows Update service. I am leaving it disabled for now./

 

[Callender]

RE:

RE:
The batch file seems to have fixed the issue!

Just for info - have a read through this:

http://www.sevenforums.com/windows-...ade-updates-windows-7-8-a-91.html#post3215386

I've found that the batch file does not always succeed in deleting everything that it is supposed to delete and that manual/ force deletion may be required.

 

[martinlest]

Looks complex! I think for now I am going to leave the update service disabled and run Windows Update manually as and when. It's always seemed to me that Windows Update usually creates more problems on my PC than it fixes (though yes, I do realise, the problems are most often much more visible than the 'behind the scenes' fixes!)...

 

[radugb]

Do you have KB3022345, if so please uninstall it, it will be replaced by a newer patched version.
As the other error is related to the windows update engine, please follow the instructions from this link,
http://www.sevenforums.com/windows-...ne-activation-issue-posting-instructions.html

Roy

Uninstalled KB3022345. Did not make a difference. I tried running the SURT tool again. Still did not go thru. It hangs at installing the Hotfix during install and eventually runs the system out of memory.

Not sure about the link you posted. It contains nothing in it for Windows Update, just Windows activation.

 

[torchwood]

IT will do, removes a lot of KNOWN incorrect errors within SFC, thats why MS patched it.
As for the link run the MGAdiag, it produces a report including the Windows update version your currently running.

Roy

 

[radugb]

IT will do, removes a lot of KNOWN incorrect errors within SFC, thats why MS patched it.
As for the link run the MGAdiag, it produces a report including the Windows update version your currently running.

Roy

You will have to reword that sentence for me. I could not understand it.

I ran the MGAdiag. Which tab shows the Windows Update version I'm currently running?

 

[legacy7955]

My system does something similar but it will automatically finish whatever it is doing after about
30 minutes or so, and CPU and memory levels will decrease to something normal.
I have my WU set to let me know about updates , but let me chose whether to download and install them.
I can actually download and install updates consistently, but sometimes you will get odd symptoms like
you go to download and install any update and the loading bar will stay at 0% and 0 KB for
5 minutes and then suddenly install the update as normal.

I've checked the sfc/scannow and everything checks out find, same with chkdsk.
I'm almost 100% certain that I have NO malware of any kind be it trojans, rootkits, ect. I have
MSE, and I use the program between my ears to keep things free of such things.

I hate to play around with it because it seems from my experience that trying to fix WU ends up creating other problems.

 

[radugb]

*Bump

 

[torchwood]

Still waiting for the report from that link

Roy

 

[radugb]

Still waiting for the report from that link

Roy

I ran the MGAdiag. Which tab shows the Windows Update version I'm currently running?

 

[torchwood]

ALL of it,
The link i gave you gives you the instructions on how to post it as well.

Roy